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Introduction 


As part of our commitment to fundamental 
rights of privacy and freedom of expression, 
we are publishing our third report on 
transparency in telecommunications with the 
objective of contributing to a more open and 
transparent society. 


The guarante e of people's fundamental 
rights, and in particular privacy and freedom 
of expression, acquires a new dimension in 
the digital world, thanks to the use of new 
technologies and the prominence of data on a 
global scale. 


Telecommunications operators have the duty 
and legal obligation to respond to the requests of 
the competent authorities to ensure the safety 
of their citizens, always in compliance with the 
law and fundamental rights and freedoms. 


For this reason, transparency is an essential 
exercise in a world in which spaces of 
responsibility are shared when it comesto 
preserving and guaranteeing people's rights. 


OUR COMMITMENT TO HUMAN RIGHTS 
Since 2006 human rights have formed an 
integral part of our Business Principles. 


As part of our due diligence process, every four 
years, we conduct an impact assessment of how 
ur activities (either directly orthrough our 
business partners) may be affecting people's 
fundamental rights. To this end, we work with 
internal and external experts to identify where 
and how our activity may be causing that impact 
and to define a formal process that facilitates 

proactive risk management and the taking 
a 
S 


O 


dvantage of opportunities, involving our main 
takeholders. 


In 2013, together with BSR "Business for Social 


Responsibility", we carried out our first impact 
assessment in all our operations. Privacy and 
freedom of expression were identified as two 
issues to be managed within the matrix. 


In 2017 we updated our impact matrix with a 
new assessment by BHR ("Business 8: Human 
Rights") in order to understand the potential 
impacts of our strategy, the Group's new 
activities, and a constantly changing digital 
environment. 


Privacy and Freedom of Expression rights were 
identified as relevant in the following activities: 


» Conditions of products and/or services. 


» New technologies and developments related to 
artificial intelligence. 


» Joint ventures, acquisitions and strategic 
alliances. 


The results of the impact assessments are 
presented to the Responsible Business Office, the 
body that integrates the heads of the operational 
areas at a global level, as well as to the Board of 
Directors Commission in charge of monitoring the 
Responsible Business Plan, so that it may be 
taken into account in its decision-making 
processes. 
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Once the analysis was completed, a number 

of activities and themes were identified that 
merit further analysis. During 2019-2020, 
evaluations ofthe impact of our activity will be 
carried out, focusing on: the process of network 
deployment, the development of new products 
and services -including those in which artificial 
intelligence is applied-, and the rights of children 
and adolescents. 


We also have the Responsible Business channel 


as a complaint and remedy mechanism where 
any interest group can raise complaints or 
queries regarding Privacy and Freedom of 
Expression. 


The guiding principles of United Nations on 
business and human rights have served us as a 


fundamental guide to promote the guarantee of 
and respect for people's rights, and, specifically, 
regarding to freedom of expression. 


We are constituent members of the 
Telecommunications Industry Dialogue 
Group on Freedom of Expression and 
Privacy (TID), which merged with the Global 
Network Initiative (GNI) in 2017. This is an 
organization on a global scale which aims to 
promote and protect privacy and freedom 
of expression, and which is made up ofa 
multistakeholder group, members ofwhich 
include investors, civil society and private 
companies: telecommunications operators, 
internet service providers, and computer and 
software manufacturers. 


As a member of this Group, Telefónica is one 

of the signatory companies of the "Principles 

of the Communications Sector on Freedom 

of Expression and Privacy". In 2017 Integrated 
Report of Telefonica, we carried out a first self- 
assessment exercise following GNI principles, 
where we described the internal policies, systems 
and procedures we have implemented, including 
the requests we receive from the competent 
authorities, human rights impact assessment and 
the communication we make to users. 


In 2019, Telefónica will be evaluated by GNI- 
accredited external advisors following the 
procedure for implementing GNI's Privacy and 
Freedom of Expression principles. 


During 2019-2020, evaluations of the impact of our 
activity will be carried out in the process of network 
deployment and the development of new products 
and services 
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Policies and application 


procedure_ 


We have promoted and reviewed different 
policies and procedures to ensure the 
protection of the rights to privacy and 
freedom of expression: 


b Privacy Policy: In 2018 it was updated 
and it forms part of Telefonica's strategy to 
design a digital experience based on trust. 


Aware of the importance of deserving the 
trust of our customers and/or users and, in 
general, of our stakeholders, this policy 
guarantees them control over and the value 
of their personal data when they are 
processed by Telefónica. 


It establishes the general mandatory 
common standards of behaviour for all 
entities in the group, and establishes a 
framework for a culture of privacy based on 
the principles of legality, transparency, 
commitment to the rights of the data 
subject, security and limitation of the 
conservation period. 


> General Data Protection Regulation: Its 


goal is encompass the most important aspects 


to be taken into account for the proper 
management and protection of personal data. 


It establishes an organizational and relationship 


model which the person most responsible for 
the Personal Data Protection Function is The 
Data Protection Officer (DPO), who reports 


directly to the Board of Directors of Telefónica, 
S.A. It is also articulated through a relationship 


and governance structure: 


e The DPO Office: It is responsible of 
coordination of Compliance and Data (to 
ensure the overall execution of compliance 
of the entire Group) and technical function 
of Data Protection in charge of supervising 


compliance with the Telefónica Group's data 


protection regulations. 


° Steering Committee: It has the 


representation of different areas ofthe 
company (Security General Counsel / Legal 
Services; Regulation and Institutional Affairs; 
Technology; CDO; Compliance; Corporate 
Ethics and Sustainability and Internal Audit). 
The general state of compliance with the 
government model is reviewed. 


* Business Committees: The DPO Office will 


maintain, through the technical function 
of Data Protection, ongoing interactions 
with the areas, through the Compliance 
Responsible, in order to ensure maximum 
uniformity in the application of common 
processes, and/or identification, and 
treatment of specific privacy issues in the 
area of activity in each area 


» Procedures in the face of certain 
requests on the part of competent 
authorities: 
It defines a global internal procedure common 
to the requirements of the authorities in 
accordance with the legislation of each 
country and seeks to ensure the legality of 
such requirements and the fundamental 
rights of those involved in such procedures. 


The principles governing the procedure 
are Confidentiality, Comprehensiveness, 
Groundwork, Diligent Response and Security. 


Our commitment is to ensure the 
participation in the process of legal areas 

or similar areas with legal competence in 
the reception of petitions. We have fixed 
interlocutors as a one-stop shop in our 
relationship with the competent authorities, 
so we reject any request that does not come 
through this regulatory channel. 
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» Global Security Policy 
In 2016 it was updated, it is guided by 


national and international standards and 


regulations in te 
security, establi 


rms of logical and physical 
shes and regulates the general 


dispositions and governing to which this 


Policy refers, an 


d which are applicable 


to all companies that are part ofthe 


Telefónica Group. 


Security activiti 


es are governed by the 


following Principles: 


e Legality: Necessary compliance with 
national and international safety laws and 


regulations. 


e Efficiency: The anticipatory and preventive 


nature of any 
highlighted wi 


potential risk and/or threat is 
th the objective of anticipating 


and preventing any potential harmful effect 
and/or mitigating any damage that may be 


caused. 


e Co-responsibility: The duty of users to 
preserve the security of the assets that 
Telefónica makes available to them. 


e Cooperation and Coordination: In order 
to achieve efficiency levels, priority is given 
to cooperation and coordination between all 
business units and employees. 


As a result of this policy, during 2017-2018, 
several development regulations were updated 
to ensure effective compliance with it (Incident 
and Emergency Management Regulations; 
Security Risk Analysis Regulations; Network 
and Communications Security Regulations; 
Cybersecurity Regulations; Supply Chain 
Security Regulations and the Government 
Security Regulations, among others). 


> Telefónica Group Responsible 


Communication Regulation 
Approved in October 2018, its objective 


is to establish guidelines for Telefónica's 
actions in relation to our communication 
and content generation channels. It is based 
on the Principles of Legality, Integrity and 

Transparency, Neutrality and Protection 
of Minors. In the principle of neutrality, we 
undertake to avoid positioning ourselves 
politically as a company and promote the right 


to freedom of expression within the regulatory 
frameworks to which we are subject. 


> Al Principles of Telefonica 
Approved by the Executive Committee in 


October 2018, the principles emphasize 
equality and fairness, transparency, clarity, 
privacy and security. They are standards that 
apply in all the markets in which we operate 
and extend throughout our value chain, 
through partners and suppliers. 


> Specific Risk on human rights 
Risks related to human rights impacts have 


always been present in Telefónica's risk 
mapping model (""), however, in 2017 the 
basic human rights risk was specifically 
included within this model. The objective is 
to raise any risk of direct or indirect impact 
on the Telefónica Group's operations due 
to possible human rights violations, as a 
consequence of the Company's own activity 
rthe activity carried out by our suppliers 
rother commercial relations. This analysis 
contemplates any change in legislation or 
activity that may have an impact on 

human rights. 


This risk assessment facilitates the definition 
of the necessary guidelines for action in 
directly affected operations with the aim of 
mitigating and/or avoiding these risks and 
prioritising Internal Audit actions, with a view 
to planning supervisory activities for internal 
control structures. 


» Reputation Risk Assessment and 
impact on Human Rights in the 
Telefónica Group's Value Proposals 

The objective is to evaluate the possible 
impact on the creation and marketing of 
Telefónica Group products and services, both 
for individuals (B2C) and for B2B customers 
and indirectly (B2B2C). Issues assessed 
include Privacy and Freedom of Expression, 
both in design and marketing. 
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Asis the case of other companies in our 
sector, at Telefónica we regularly receive 
information requests concerning the 
communications of our customers and 
users, requests to block access to certain 


sites or content, 
well as requests 


governmental agencies and courts 


or to filter content, as 
by State security forces, 


(hereinafter, “competent authorities”), to 
temporarily suspend services in specific 


areas (inthe eve 


nt of civil unrest or 


disturbances of public order, for instance). 


The purpose oft 


the procedure fo 


his report is to set out 
r the processing of such 


requests by Telefónica, within a framework 


of legality and w 


th regard to freedom 


of expression and the privacy of the 
communications of our users. 


This requires knowledge of the legal 
framework which grants legal powers to 
authorities to make this type of request and 
recording ofthe number and type of requests 
that we receive. The specific legal framework 
of each country also indicates limitations 

on facilitating the information regarding the 
requests that Telefónica receives, and thus 
the report identifies this type of limitation 

on the information provided. In addition, and 
when technically it is possible, we report the 
number of requests rejected and the customer 
affected for each indicator. 


Indicators 
of this report_ 


In the following sections we report the number 
of requests we receive from the competent 
national authorities according to the legislation 
of each country. Any request that can be 
received from a non-national authority must 
comply with the judicial and/or legal processes 
that correspond to each country. At Telefonica 
we only deal with requests from a competent 
national authority. At Telefónica we do not 
deal with private requests, only requests from 
authorities determined by law are processed. 


When the laws of any country prohibit the 
disclosure of information on these indicators, 
we inform you ofthe regulations and the 
reason why it is not possible to report. 


Thus, the indicators we report are: 


> Lawful interceptions: Lawful interceptions: 
The orders and requests originating from the 
competent authorities, within the framework 
of criminal investigations and, if appropriate, 
civil cases, with the aim of intercepting 
communications or accessing data traffic in 
real time. 


> Communication associated Metadata 
Access: All requests originating from 
competent authorities whose aim is to obtain 
history data involving: 


> Registered users' name and address 
(subscriber information); 


> Data identifying the source and destination 
of a specific communication (e.g., telephone 
numbers, Internet service user names, etc.); 


> Communication date, 
> Time and duration; 


> Computer equipment identities (including 
IMSI o IMEI); 


> User or device location. 
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> Blocking and filtering of certain contents: 


Requests from the competent authorities in 
terms of blocking access to specific websites 
or content. These involve requests to block 
access to websites or contents, as opposed 
to requests to delete user content. By way 
of example, blocking requests are issued 
because websites or contents infringe local 
laws (usually in relation to child pornography, 
online betting games, copyright, libel, the 
illegal sale of medicine, weapons, registered 
trademarks). 


To proactively fight against the contents 
and images of sexual abuse of minors on the 
Network, at Telefónica we proceed to block 
these materials following the guidelines 

and lists provided by the Internet Watch 
Foundation in the following countries: Chile, 
Costa Rica, Ecuador, El Salvador, Spain, 
Guatemala, Nicaragua, Mexico, Panama, Peru, 
the United Kingdom, Uruguay and Venezuela. 
In Telefónica Colombia, we do the same thing 
through the MINTIC and the DUJIN. 


> Geographical and temporary suspensions 
of the service: A request from the competent 
authorities to temporarily or geographically 
limit the provision of a service. These requests 
are usually connected with circumstances 
involving situations of force majeure, such as 
natural catastrophes, acts of terrorism, etc... 


Telefónica doesn't handle private requests, 
we only address requests from competent 
authorities by law. 


In addition, for each indicator we have added 
the following sub-indicators: 


> Number of requests rejected or partially 

addressed: number of times that we have 

rejected a request or that we have only 
provided partial information or no information 
in response to arequest for one of the 
following reasons: 

* Because it does not comply with local 
legislation for that type of request. 

* Because it does not contain all the necessary 
elements to enable undertaking (necessary 
signatures, competent authority, technical 
description of the request etc.). 


= 


* Because ofthe technical impossibility of 
undertaking the request. 


) Customers affected: number of customers 
affected by each request, taking into account 
that a single request may affect one or several 
customers. 
On the other hand, in this Transparency 
Report, our objective is to inform about those 
petitions that may have a potential impact on 
the rights of privacy and/or freedom of 
expression as they are framed within what we 
call "major events". 


In this regard we have identified a case of 
major event in Venezuela within the situation 
“Substantial operational changes” 


In October 2017, Administrative Ruling No. 171 
"Rules on the Collection or Capture of Personal 
Data from Applicants for Mobile and Fixed 
Telephony Services via Wireless Networks or 
Non-Geographic Number with Nomadic Voice 
Service" came into force, modifying, mainly, 
the data to be collected from new customers 
and expanding the information that the 
operator must keep stored and in records with 
respect to: their subscribers, data services, call 
details, text messages, top-ups, to be provided 
to State security bodies with investigative 

or investigative powers on the occasion of a 
criminal investigation. 


Our objective is to inform about those petitions that may 
have a potential impact on the rights of privacy and/ 
or freedom of expression as they are framed within 


what we call "major events" 
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Argentina_ 


www.telefonica.com.ar 


Telefonica has been present in Argentina 
since the privatisation of telephone services in 
1990. Over these years, the company has 
developed into a group of companies 
specialized in integrated communications. 


After having been the first significant 
investment of Spanish capital, in these years 
it contributed to the development of 
communications through infrastructure 
investments and a wide range of fixed and 
mobile telephony and Internet services. 


The Company managed more than 25 million 
accesses at December of 2017 


With regard to the financial figures, in 2017 
Telefónica's revenue in Argentina stood at 
3,495 million euros and the OIBDA was 971 
million euros. 


LAWFUL INTERCEPTIONS 


Legal framework 

> National Constitution of Argentina (Article 
18). 

> Law 19,798 (articles 18 and 19): Inviolability 
of communications. 

> Law 27,078, article 5: Inviolability of 
communications 
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Competent authorities 

> Judges. The procedure establishes that the 
above must officiate at the Directorate for the 
Capturing of Communications, a body 
currently dependent of the Supreme Court of 
Justice of the Nation, and this body is that 
which requests the intervention from the 
corresponding supplier company. 


Requests* 


Lines with active intervention**** 


Requests for Connections 14,748 1,630 


(Only registrations) ** 


11,709 1 257 1.274 1-523 
6,602. I 7 f _ f o | 7 i | J f 


2013 2014 2015 2016 2017 2013 2014 2015 2016 2017 


*In Argentina we desclose the law interception requeriments 
by the nature of new requests and extensions that may come 
from another year 


Requests for Connections, 
Disconnections and Extension*** 


ooo TA 261 ** Requests for new interventions 
21 824. *** Includes requests to disconnect interventions and 
15, 819 18; 664” extensions on connections for a fixed period 
**** Active Interventions at closing in 2016 (including 
fi registrations and extensions) 
2013 2014 2015 2016 2017 


ACCESSES 


4,120.8 


customers 


19,255.9 


accesses 


25,098.1 


Customers at closing 2017 (data in thousands). 
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Number of customers affected: 51415 
Taking into account that the operation is carried 
out by number of lines, it may be assumed that 
the number of customers affected coincides 
with the number of lines intervened. . 
Notwithstanding this, it should be borne in 
mind that a customer can be the object of more 
than one request for intervention in a year, at 
different times, so the number of customers 
affected may be slightly lower. 


Requests rejected: 0 


ACCESS TO METADATA 


At Telefónica Argentina all the judicial requests 
received are recorded, regardless of whether 
they request metadata, content blocking or 
service interruption. 


Legal framework 

> National Constitution of Argentina (Article 18) 

> Law 19,798 (arts. 18 and 19): Inviolability of 
communications 

> Law 27,078, article 5: Inviolability of 
communication 


Competent Authorities 

» Judges, Prosecutors and the State security 
corps and bodies to which the investigation 
has been delegated. 


CONTENT BLOCKING AND FILTERING 

Legal framework 

> Ley 27.078, art. 5.: Inviolabilidad de las 
comunicaciones 


Competent Authorities 

» Judges, Prosecutors and the State security 
corps and bodies to which the investigation 
has been delegated. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

» Although there is no specific rule governing 
this, it may be interpreted as part of what is 
established in Art. 57 of Law 27,078, as 
regards. 
"Article 57. - Network Neutrality. Prohibitions. 
IC service providers may not: 
a) block, interfere, discriminate, disrupt, 
damage, or restrict the use, sending, receiving, 
providing or access to any content, 
application, service, or protocol unless by 
court order or explicit user request. [...]" 


Competent authorities 

>In the absence of a specific rule, the only body 
competent for passing a measure to suspend 
the service in a given area is a judge with 
federal jurisdiction, according to art. 57. 


Requests* 
97,650 
80,771 83,728 8] 404 | 
2013 2014 2015 2016 2017 


* Data added for Metadata, Content Blocking 


and suspension of service 


Number of customers affected: For access 
to metadata it must be emphasised that the 
same request may request information on a 
single customer or several, so currently has not 
been possible to make a valid estimate. For 
content blocking will affect all customers who 
want to access the blocked url. 


Requests rejected: 0 
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Brazil_ 


http://www.telefonica.com.br/ 


Telefónica entered the Brazilian market in 
1998, when the restructuring and privatisation 
of Telebras was taking place. Later, in 2002, 
Telefónica and Portugal Telecom created a 
Joint Venture to operate in the Brazilian mobile 
market and they began their commercial 
operations under the name Vivo in April 2003. 


In 2015, Telefónica Brasil has closed the 
acquisition of GVT and has become the leading 
Brazilian integrated operator. 


Telefónica manages more than 97.9 million 
accesses in Brazil at December of 2017. 


With regard to the financial figures, in 2017, 
Telefónica's revenue in Brazil reached about 
12,019 million euros and the OIBDA stood at, 
4.191 millones de euros. 


LAWFUL INTERCEPTIONS 


Legal framework 

» Constitution ofthe Federal Republic of Brazil: 
Article 5 

> Law No. 9,296, of 24 July 1996 

» Resolution No. 426 of 9 December 2005 / 
Regulation of Fixed Telephone Service - STFC. 
STFC 

» Resolution No. 614 of 28 May 2013 / 
Regulation on Multimedia Communication 
Service 
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» Resolution No. 477 of 7 August 2007 / 
Regulation on Personal Service 


Competent authorities 

>In accordance with article 3 of Brazilian 
Federal Law No. 9,296/1996 (Law on 
Interceptions), only the Judge (in the criminal 
sphere) can determine the interceptions 
(both telephonic and telematic), at the 
request of the Public Prosecutor or the Police 
Commissioner (“Police Authority”). 


Number of customers affected: The number 
of affected customers cannot be confirmed, 
since the annual number also covers situations 
where there were extensions or new 
interceptions for the same lines. 


Requests rejected: 0 


Requests 


437,770 


Includes telephonic and telematic requests 


326,811* 
274,629 
' 245,929 ou | [| 


2013 2014 2015 2016 2017 


* Includes GVT: During 2015 Telefónica acquired GVT, making 
Telefonica Brazil the leading integrated operator in the 
Brazilian market. 


ACCESS TO METADATA 


Legal framework 

» Constitution of the Federal Republic of Brazil: 
Article 5 

> Law No. 9,296 of 24 July 1996 

> Law No. 9,472 of 16 July 1997. Art. 3 

> Law No. 12.683 of 9 July 2012. Art. 17-B 

> Law No. 12,830, of 20 June 2013. Article 2 

> Law No.12850 of 20 August 2013 Article 15 


> Law No. 12965 of 23 April 2014. Art. 7; 10 and 19. 


> Decree No. 8,771 of 11 May 2016. Article 11 

» Resolution No. 426 of 9 December 2005. / 
Regulation of Fixed Telephone Service - STFC. 
STFC Articles 11, 22, 23 and 24. Resolution No. 
477 of 7 August 2007 / Regulation on Personal 
Service Articles 6, 10, 12, 13, 89 and 90. 

> Resolution No. 614 of 28 May 2013 / 
Regulation on Multimedia Communication 
Service Articles 52 and 53. 


ACCESSES 


13,837.3 


customers 


74,931.3 


accesses 


9/,905.1 


Customers at closing 2017 (data in thousands). 
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Competent Authorities 

» Public Prosecutor's Office, Police Commissioners 
and Judges in any sphere: the name and address 
of the registered user (subscriber data), as well as 
the identity of the communication equipment 

(including IMSI or IMEI). 


» Judges in any sphere: data to identify the 
origin and destination of acommunication 

(e.g. telephone numbers, internet service 

user names), date, time and duration of a 

communication and the location of the device. 


oO 


Requests 
1,942,267 
1,552,080 
1,291,629 
899,474 
703,323 l 
2013 2014 2015* 2016 2017 


Total requests included in the requests. The same request 
may apply to multiple requests. Among the requests that 
were made cadastre, communications and connection data 
is found 


*The data of the GVT company purchased by Telefónica Brazil 
in 2015 are not included.N 


Number of customers affected: The number 
of customers affected cannot be confirmed, 
since the annual amount reported may include 
duplication of customer numbers required by 
different public authorities. 


Number of requests rejected: Telefonica 
Brasil is working to be able to filter accepted 
and rejected petitions. 


CONTENT BLOCKING AND FILTERING 
Legal framework 


» Law No. 12965 of 23 April 2014. Articles 7 and 
19: 


Requests 


Competent Authorities 
» Exclusively Judges. 


Number of customers affected: 3,056 
Number of requests rejected: 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Contexto legal 
» Resolution No. 73 of 25 November 1998. Article 
31. 


> Resolution No. 477 of 07 August 2007. Article 19. 


Competent Authorities 
» Únicamente Jueces. 


Requerimientos* 


a A 
2013 2014 2015 2016 2017 


* There are no data available, as they are recorded together with 
the cases known as atypical and low-volume. 


Number of customers affected: N/D 


Number of requests rejected: N/D 


3,056 


1,185 
1.185 (individual) 
_2 (general) 


2013 2014 2015 2016** = 2017*** 


There are no data available, as they are recorded together with 
the cases known as atypical and low-volume 


* The two cases in 2015 correspond to the blocking of the 
WhatsApp application 


- In February 2015, the judicial authority determined that the 
operators should block their customers’ access to the WhatsApp 
application until the fulfilment of the original order sent to the 
application. The request had a legal basis within the area of the 
criminal proceedings conducted by the Commissioner for Child 
and Adolescent Protection 


- On 16/12/2015, the Company received another order for a 
48hour access period to the WhatsApp application. The measure 
was adopted with the same legal basis as the case mentioned in 
the previous point. 


In both cases, the Company complied with the judicial requests 


Telefónica established a protocol for the provision of information 
at its customer service centre as a measure of transparency and 
with the aim of giving customers explanations for these cases 


** Disclaimer: The general blocking measures that potentially 
affected all customers having been passed, the public 
authorities began to use individual blocks in the field of criminal 
investigations. Up to the present date and from 2016, we 
identified 1,187 individual blocks, understanding as such a block 
so that a user can access certain content and 2 general blocks, 
which would affect all customers who want to access that 
content or service 


***Individual blocking 
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Central America. 


The structure of Telefónica Central America 
groups together the mobile operations of 
Telefónica in Costa Rica, El Salvador, Guatemala, 
Nicaragua and Panama. 


Telefónica manages more than 13.200 million 
accesses in Central America at Decemeber of 
2017. 


At 2017, Telefónica's income in Central America 
was 890 million euros and the OIBDA stood at 263 
million euros. 
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Costa Rica 


http://movistar.cr/ 
LAWFUL INTERCEPTIONS 


Legal framework 
> Law Against Organised Crime (art. 14 and 15) 


Competent Authorities 

> The judges of the Judicial Authorities. 

> Since the creation of the Judicial Centre for 
the Intervention of Communications (CJIC), 


the interventions are performed directly by 
the CJIC judges from the CJIC. 


Requests 


2013 2014 2015 2016 2017 


Number of customers affected: 0 


Number of requests rejected: 550 


m A I) te 
186 
82 
A 2 PA 
a 


ACCESS TO METADATA 


Legal framework 

» Criminal Procedure Code. Art. 198 

> Jurisprudence of the Constitutional Chamber 
which guarantees the power of judges, public 
prosecutors and the police to request 
metadata associated with communications. 


Competent Authorities 
» Judges, public prosecutors and the judicial 
police. 


Requests 
17,300 
16,113 
14,208 
10,186 
7,215 l 
2013 2014 2015 2016 2017 


Number of customers affected: Currently 
we cannot confirm the number of affected 
customers as the same requirement can affect 
several customers. The registration system is 
done by number of requirements, not by 


number of affected customers. We are working 
to make this distinction and to be able to give 
this information in the following Report 


Number of requests rejected: 550 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 
» Not applicable 


Requerimientos 


N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable 


Number of requests rejected: 
Not applicable 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

> There is no specific legal framework for this 
indicator. 

Competent Authorities 


> Not applicable 


Requerimientos 


N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable 


Number of requests rejected: 
Not applicable 
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El Salvador 


http://www.telefonica.com.sv/ 


LAWFUL INTERCEPTIONS 


Legal framework 

» Special Law for the intervention of 
communications of 2010 (Art. 13). 

» Political Constitution ofthe Republic of El 
Salvador (Art. 24) 


Competent Authorities 

» The Public Prosecutor's Office ofthe Republic 
has a Centre for the Intervention of Calls, 
connected to all the operators providing 
telephony services in El Salvador, and therefore, 

within the framework of the investigation of a 

crime and by virtue of the order of a judge (as 

established in the Law on Interventions), it is 

possible for the Public Prosecutor to perform 
this type of action, but Telefónica is not 
authorised to do so. 

Requests 


N/D N/D N/D N/D 12,546 


2013 2014 2015 2016 2017 


Number of customers affected: Currently we 
cannot confirm the number of affected 
customers as the same requirement can affect 
several customers. The registration system is 
done by number of requirements, not by number 
of affected customers. We are working to make 
this distinction and to be able to give this 
information in the following Report. 


Number of requests rejected: 0 


5 


ACCESS TO METADATA 


Legal framework 
> Law for the intervention of communications 
of 2010 (Art. 43 and 47). 


Competent Authorities 

> The Public Prosecutor's Office of the Republic 
and the Judges, within the framework of the 
investigation of a crime. 


Requests 
12,546 
10,124 
4933 5181 
3,741 a 
2013 2014 2015 2016* 2017 


ncrease in criminal activity and its 


Number of customers affected: Currently we 
cannot confirm the number of affected 
customers as the same requirement can affect 
several customers. The registration system is 
done by number of requirements, not by number 
of affected customers. We are working to make 
this distinction and to be able to give this 
information in the following Report . 


Number of requests rejected: 0 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 
> Not applicable. 


Requests 
N/A N/A N/A N/A N/A 
2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable 


Number of requests rejected: 
Not applicable 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

> Special Law Against the Crime of Extortion 
(Art.13 and 14). 

» Código Procesal Penal (Art.238) 

> Ley de Telecomunicaciones (Art. 30 y 31 


Competent Authorities 

» The Public Prosecutor's Office ofthe Republic in 
the event ofthe suspension of specific services. 

» Regarding prisons, since operators are obliged 
to do so, there is no need for a request; 
however, ifnew prisons are created or existing 
ones are relocated, it is the Ministry of Justice 
and Public Security that will request the 
blockade of the geographical area. 


Requests* 
PNL IA 
0 0 0 
2013 2014 2015 2016 2016 


* Number of affect 


impleme 
Extortion 
from p 
of lic 
Att 
f vake adjust 
t nationa 


additional requirements 


Number of customers affected: 186,000 
aprox. 


Number of requests rejected: Ninguna 
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Guatemala 


http://www.movistar.com.gt/ 
LAWFUL INTERCEPTIONS 


Legal framework 

> Law against Organised Crime (Decree Number 
21-2006) (Interception of Telephones and 
Other Means of Communication). Articles 48 
and 56). 


Competent Authorities 
> Judges of First Instance of the Criminal 
Branch, by judicial order. 


Requests 
f al I | | 
2013 2014 2016 2017 


Number of customers affected: Currently we 
cannot confirm the number of affected 
customers as the same requirement can affect 
several customers. The registration system is 
done by number of requirements, not by number 
of affected customers. We are working to make 
this distinction and to be able to give this 
information in the following Report. 


Number of requests rejected: 65 


16 


ACCESS TO METADATA 

Legal framework 

» Criminal Procedure Code (Decree 51-92), Article 
319. 


Competent Authorities 


> Judges. 
Requests 
3,628 | 
~ 3,499 
2757" 2668 
2,172 i {| 


2013 2014 2015 2016 2017 


Number of customers affected: Currently 
we cannot confirm the number of affected 
customers as the same requirement can affect 
several customers. The registration system is 
done by number of requirements, not by 
number of affected customers. We are working 
to make this distinction and to be able to give 
this information in the following Report. 


Number of requests rejected: 0 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 


> Not applicable. 


Requests 
N/A N/A N/A N/A 


2013 2014 2015 2016 


Number of customers affected: 
Not applicable. 


Number of requests rejected: 
Not applicable 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

> There is no specific legal framework for this 
indicator. 

Competent Authorities 


» Not applicable. 


Requests 


N/A N/A N/A N/A 


2013 2014 2015 2016 


Number of customers affected: 
Not applicable. 


Number of requests rejected: 
Not applicable 
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Nicaragua 


http://www.movistar.com.ni/ 
LAWFUL INTERCEPTIONS 


Legal framework 

» Law on the Prevention, Investigation and 
prosecution of organized crime and on the 
administration of seized, confiscated and 
abandoned property (Art. 62) 


Competent Authorities 

» District Criminal Judges who may authorize 
the Attorney General of the Republic or 
Director General of the National Police. 


Requests 


N/A N/A N/A N/A 0 


2013 2014 2015 2016 2017 


Number of customers affected: 0 


Number of requests rejected: 0 


ACCESS TO METADATA 


Legal framework 

> Regulation of Law No. 200 "General Law of 
Telecommunications and Postal Services" of 
2005 (Art. 10). 


Competent Authorities 


b Judges by written and well-founded request. 


PTELCOR, Regulatory Body upon the basis 
established in the Article. 10, Regulation on 
Law 200. 


Requests 


1.252 


599 
nera A ¡e ’ 
g g B f 


2013 2014 2015 2016 2017 


Number of customers affected: Currently 
we cannot confirm the number of affected 


customers as the same requirement can affect 


several customers. The registration system is 
done by number of requirements, not by 


number of affected customers. We are working 


to make this distinction and to be able to give 
this information in the following Report . 


Number of requests rejected: 145 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 
»Not applicable. 
Requerimientos 
N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable. 


Number of requests rejected: 
Not applicable. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 
»Not applicable. 
Requests 


N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable. 


Number of requests rejected: 
Not applicable. 
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Panama 


http://www.movistar.com.pa/ 


LAWFUL INTERCEPTIONS 

Legal framework 

» Criminal Procedure Code (Art. 311). 

> Law 121 of 31 December 2013 reforming the 
Criminal, Judicial and Criminal Procedure Code 
and adopting measures against activities 
related to organised crime (Articles 24, 25, and 
26). 


Competent Authorities 

> The Judge of Guarantees or, if appropriate, the 

respective Magistrate of the Criminal 

Chamber of the Supreme Court of Justice may 

authorize, at the Public Prosecutor's request 

the interception of communications by means 

of a well-founded resolution. 

> The intervention of communications shall be 
of an exceptional nature. 


Requests 
532 
364 
258 
77 87 Í 


2013 2014 2015 2016 2017 


Number of customers affected: Currently we 
cannot confirm the number of affected 
customers as the same requirement can affect 


several customers. The registration system is 
done by number of requirements, not by number 
of affected customers. We are working to make 
this distinction and to be able to give this 
information in the following Report 


Number of requests rejected: 0 


ACCESS TO METADATA 


Legal framework 
> Law No. 51 of 18 September 2009. (art.1 and 
2) 


Competent Authorities 
» Public Prosecutor. 
> Judicial Authority. 


Requests 
10,082 
3,138 3.944 
7,653 
f . sl Lo 497. s 
2013 2014 2015 2016 2017 


Number of customers affected: Currently 
we cannot confirm the number of affected 
customers as the same requirement can affect 


several customers. The registration system is 
done by number of requirements, not by 
number of affected customers. We are working 
to make this distinction and to be able to give 
this information in the following Report 


Number of requests rejected: 0 
BLOCKING AND FILTERING 

OF CERTAIN CONTENTS 

Legal framework 

> There is no specific legal framework for this 


indicator. 


Competent Authorities 
»Not applicable. 


Requests 


N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected: 
Not applicable 


Peticiones rechazadas: 
Not applicable. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

» Political Constitution ofthe Republic of 
Panama (article 55). 

> Cabinet Resolution No. 89 of 11 June 2013. 

» Resolution AN No. 6,295-Telecom of 8 July 
2013. 


Competent Authorities 
> The Executive Body, through the National 
Authority of Public Services (ASEP). 


Requests 
1 
a 0 0 0 0 
2013 2014 2015 2016 2017 


Number of customers affected: 0 


Peticiones rechazadas: 0 
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Chile_ 


http://www.telefonicachile.cl/ 


The Telefónica Group in Chile is a provider of 


telecommunications services (b 
TV and voice). 


roadband, digital 


Telefónica Chile also concentrates on the 
expansion ofthe pay TV business and the 
progressive adoption of high-speed broadband 


plans and, inthe mobile busines 


In December of 2017, Telefónica 


12.2 million accesses in Chile. Wi 


S. 


had more than 
ith regard to the 


financial figures, Telefónica's revenue in Chile 


stood at 2.186 million euros and 
630 million euros in 2017. 


LAWFUL INTERCEPTIONS 


Legal framework 
» Criminal Procedure Code: Artic 
and 223. 


the OIBDA was 


es 9,219,222 


> Law 20,000. Drug trafficking and control. 
» Law 19,913 on money laundering. 


> Law 18,314 determining terrori 


> Decree Law 211, article 39, lett 
> Law 19.974. National Intelligen 
Letters a), b), c) yd) of Article 2 
articles 23 and 28 of the same 


st consultations 
ern). 

ce System Law. 
4, in relation to 
legal body. 


» Criminal Procedure Code. Artic’ 
113 ter. 


19 


es 177, 113a and 


> Decree 142 of 2005 of the Ministry of Transport 
and Telecommunications, Regulation on the 
interception and recording of 
telecommunication and other forms of 
telecommunication. 


Competent authorities 

» Public Prosecutor's Office, by virtue of a prior 
judicial authorisation. 

> State Intelligence Agencies, through the 
National Intelligence System. 

» The Police, by means of authorisation from the 
Examining Judge of the Crime (Inquisitorial 
Criminal Procedure). 

» National Economic Public Prosecutor's Office, 
with the prior authorisation ofthe Court of 
Defence of Free Competition, approved by the 
respective Appeal Court Minister. 


Requests 
14,836 
11,952 12,480 
10,281... i l f 11,867 
2013 2014 2015 2016 sgi 


Number of customers affected: Currently we 
cannot reliably determine the exact number of 
affected customers as there are mobile phone 
lines that correspond to prepaid services without 
a registered owner, and anonymized users, called 
prepaid without an associated owner. 


On the other hand, it is necessary to bear in mind 
that in commercial requirements for access to 
telephone lines, a single commercial request may 
group together the request for access to several 
telephone lines. 


In order to determine precisely the number of 
affected customers, a local regulatory legal 
reform is necessary that allows each operator 

to establish for each telephone line the 
identification ofthe assigned customer by means 
of its identity document number (DNI or fiscal 
identification), an issue that, although discussed, 
has not occurred so far. 


Number of requests rejected: 54. 


ACCESSES 


customers 


9,056.6 


]2,233.0 


Customers at closing 2017 (data in thousands). 
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ACCESS TO METADATA 


Legal framework 

» Criminal Procedure Code: Paragraph 5 of Article 
222 ofthe Criminal Procedure Code, in relation 
to Article 180 of the same legal text, under 
penalty of contempt of court, Article 240 ofthe 
Civil Procedure Code. 

» Inquisitorial Criminal Procedure: Articles 120a 

and 171 ofthe Criminal Procedure Code. 


Competent authorities 
» Public Criminal Prosecutor: The Public 
Prosecutor's Office, by means of an order to 
investigate only personal data which are not 
covered by Constitutional Guarantees of 
Privacy and the Inviolability of 
Communications. 
» Police with authorisation from the Public 
Prosecutor's Office and an order to investigate. 
> Summary Judge in the Inquisitorial Criminal 
Procedure. (Criminal Procedure Code). Estate 
Inteligencie. 
» Agencies with prior judicial authorisation.. 


Requests 


Spi, 21,220 2 be 
28,556... 


1 { | li í J 


2013 2014 2015 2016 2017 


Number of customers affected: Currently we 
cannot reliably determine the exact number of 
affected customers as there are mobile phone 
lines that correspond to prepaid services without 
a registered owner, and anonymized users, called 
prepaid without an associated owner. 
On the other hand, it is necessary to bear in mind 
that in commercial requirements for access to 
telephone lines, a single commercial request may 
group together the request for access to several 
telephone lines. 


In order to determine precisely the number of 
affected customers, a local regulatory legal 
reform is necessary that allows each operator to 
establish for each telephone line the identification 
of the assigned customer by means of its identity 
document number (DNI or fiscal identification), 
an issue that, although discussed, has not 
occurred so far. 


Number of requests rejected: 286 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 

> Law 17,336, on Intellectual Property. Article 
85 Q, in relation to the provisions of article 
85R, letters a) and b), of the same legal text. 

» Civil Procedure Code: Unnamed 
precautionary or interim measures. 

» Criminal Procedure Code: Unnamed 

precautionary or interim measures. 


Competent authorities 

> Ordinary and special courts organically 
dependent on the Judicial Authority. 

> Court of Defence of Free Competition, 
subject to the managerial, correctional and 
economic superintendence of the Supreme 
Court, with the knowledge of an adversarial 
process 


Requests 


1 1 
Sin registro im (J 0 0 


2013 2014 2015 2016 2017 


Number of customers affected: O 


Number of requests rejected: 0 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
> There is no specific legal framework for this 
indicator. 


Competent Authorities 
» Not applicable . 


Requests 


N/A N/A N/A N/A N/A 


2013 2014 2015 2016 2017 


Number of customers affected : 
Not applicable. 


Number of requests rejected: Not applicable. 
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Colombia_ 


http://www.telefonica.co/ 


Telefonica has been present in Colombia since 
2004. It began its activities in the mobile market, 
following the acquisition of Bellsouth's cellular 
operation in the country. Subsequently, in 2006, 
Telefónica acquired the control and management 
of Colombia Telecom. Today, Telefónica provides 
voice, broadband and pay television services inthe 
country. 


Telefónica Colombia managed 17.9 million 
accesses at December of 2017. 


In the fourth quarter of 2017, Telefónica's revenue 
in Colombia reached 1,462 million euros and the 
OIBDA stood at 482 million euros. 


LAWFUL INTERCEPTIONS 


Legal framework 

» Colombian Constitution: Articles 15 and 250. 

» Law 906, Criminal Procedure Code of 2004. 
Article 235. Modified by article 52 of Law 1453 of 
2011. 

> Law 1621 of 2013: Art. 44, 

> Decree 1704 of 2012: Articles 1 to 8. 

> Decree 2044 of 2013, Art. 3. 


Competent authorities 

> Organisations with permanent functions as 
Judicial Police, with the permission of the 
Prosecutor General of the Nation or his delegate. 


Requests* 


9 


2013 2014 2015 2016 2017 


*They only include the request on Fixeds. Mobile lines 
Interceptions of mobile lines are not reported: The Public 
Prosecutor ofthe Nation in Colombia, as the competent 
authority in accordance with the Constitution and the Law, 
performs direct interceptions of mobile lines 


Number of customers affected: O 


Number of requests rejected: 0 


ACCESS TO METADATA 


Legal framework 

> Colombian Constitution: Article 250 
> Law 906 of 2004, Art. 235. 

> Law 1621 of 2013 Ar. 44. 

> Decree 1704 of 2012, Art. 1 to 


Competent authorities 
» Authorities with judicial police functions; these 
may be of a permanent or transitory nature: 


Article 312 of the new criminal procedure code 
defines that the entities which hold permanent 
powers of the Judicial Police are as follows: 


» Prosecutor General of the Nation and all the 
public servants who perform judicial functions 
(article 249 CN and articles 112, 113 CPC). 


> udicial Police: C.T.1., National Police and D.A.S., 


authorised by the competent judicia 
authority and by legal mandate (articles 311 
to 320 CPC). 
> “Anti-kidnapping and Extortion” Unified 
Action Groups (Law 282 of 1996). 


They exercise special judicial police functions, 

in matters within their competence: 

> Controller General of the Nation (article 267 
CN and article 312 CPC). 

> General Procuracy of the Nation (article 275 
CN and article 312 CPC). 

» National Directorate of Taxes and National 
Customs _ DIAN (see numeral 2, section II) 

> Public entities which exercise monitoring and 
control functions] 


ACCESSES 


1,609.6 


customers 


14,590.60 


1 7,940.5 


Customers at closing 2017. (data in thousands) 
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» Mayors and police inspectors, in the places in Requests BLOCKING AND FILTERING Requests* 
the territory where there are no members of OF CERTAIN CONTENTS 
the judicial police of the National Police. 14719 No. of new URLs** 

» National and regional Directors ofthe INPEC, un 906 1 1,297 Child sexual abuse material 12,625 
directors of prison establishments and custodial 10 950 11,086 | 
and surveillance personnel, in accordance with > Law 679 of 2001: Articles 7 and 8 7970 _ 
the Penitentiary and Prison Code. > Decree 1524 of 2002: Articles 5 and 6 o ne 

» Police Inspections (article 312 CPC). > Law 1450 of 2011: Section 56. 2,852 

> Resolution CRC 3502 of 2011. pi T427 g 
The offices of internal disciplinary control are E ES pea A - 
2013 2014 2015 2016 2017 
authorised for investigations of a disciplinary 2013 2014 2015 2016 2017 Competent authorities 
nature, in accordance with Law 734 of 2002 >The National Police sends the Ministry of No. of incremental URLs*** 
(Single Disciplinary Code): Information and Communication Technology 2,509 2123 
Number of customers affected: No records a list of URLs with blocking orders so that the y l 5 989 ; 

» Police with authorisation from the Public are kept ofthe number of customers. Ministry can publish it on its website and so i i 
Prosecutor's Office and an order to that it can be viewed by the PSIs (Internal pe 
investigate. Number of requests rejected: 110 Service Portal). To access this list, the PSIs 2013 2014 2015 2016 2017 

> Summary Judge in the Inquisitorial Criminal must have a username and a password which 


form W OLF C ontent Control" 
Procedure (Criminal Procedure Code). 
> State Intelligence Agencies with prior judicial 


authorisation. 


are previously provided by the Ministry, so as 
to prevent anyone from browsing URLs with a 
blocking order for containing child sexual 
abuse. 


hy y The list 
sis through 
ommunication 
1 Consultation 


tions in ei pol 
ation it is valid 
er. 2. Analysis of p 
re identified and lo 
ection), which is th 
Blocking or unblock 
or unblock the URLs for the updat 
genera 


5 Veri ificat ation 
consul 


undertake sn, URLs that 
have bloct validated 
** Number of URLs added to the list published by MINTIC during 


the year. 


*** Number of URLs which in 
data, in turn, exclude the URLs whi 
during the year 


ghout the year. These 
e eliminated from the list 


> 
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La 


Illegal Games 


Legal fram 


ework 


E o 


> Law 1753 of 2015: Art. 93, paragraph 3 
» Law 1450 of 2011: Art. 56 
> Resolution CRC 3502 of 2011 


Competent authorities 


> Coljuegos, an industrial and commercia 


company of the Sta 


administrati 


games of ch 


Police identi 


fy Web 


unauthorized game 


commercial 
Information 
to commun 
that theym 


URLs 


te in charge of the 


on of the rentistic monopo 
ance, together with the National 


portals in which 
s of chance are 


ized and request the Minist 
Techno 
icate to the ISPs the list of U 
ust block. 


y of 


ry of 
ogies and Communications 


RLs 


Court Order 

They are requests received from the 
Directorate of Criminal Investigation and 
Interpol of the National Police, where the 
blocking of specific URLs is requested because 
they would be used to affect the good name 
and personal and work activities of a person. 


Legal framework 

> Law 1273 of 2009: Art. 269F 
» Law 1340 of 2009: Art. 18 

» Law 1450 of 2011: Art. 56 

> Resolution CRC 3502 of 2011 


Competent authorities 

>The General prosecutor of the Nation and the 
Superintendence of Industry and Commerce 
within the investigations they are carrying out 
request the Ministry of Information 
Technology and Communications to 
communicate to the ISPs the URLs they must 
block. 


URLs 


5 
2017 


Number of customers affected: The 
blocking of a URL affects all customers who 
want to access its content, so it is difficult to 
assess the scope. 


Number of requests rejected: N/A for the 
blocking system established by law. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
> Law 1341 of 2009, Art. 8. Cases of 
emergency, unrest, disaster and prevention. 


Competent authorities 

» Priority will be given to the authorities in the 
transmission of free and timely communications 
for the purpose of the prevention of disasters, 
when these are considered essential. 


Requests 
0 0 0 0 0 
2013 2014 2015 2016 2017 


Number of customers affected: 0 


Number of requests rejected: 0 
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Ecuador_ 


http://www.telefonica.com.ec/ 


In Ecuador, Telefónica began its operations in 
2004, with the acquisition of BellSouth's mobile 
operation in the country (which, at that time, was 
the second largest operator in Ecuador, with 
816,000 customers and a market share of 35%). 


The company is in the 24 provinces of the 
country and communicates to more than 5 
million Ecuadorians with mobile services, 
generating anetwork to more than 100,000 
families in Ecuador. 


24 


Telefónica manages more than 4'5 millones 
accesess in Telefonica Ecuador at December 2017 


Telefónica's revenue in Ecuador stood at 539 
million euros and the OIBDA was 163 million 
euros in 2017. 


LAWFUL INTERCEPTIONS 


Legal framework 

» Integral Organic Criminal Code (art. 476-477). 

» Concession Contract signed between OTECEL 
S.A. and the Ecuadorian State. 


Competent authorities 
» Competent prosecutor within an investigation. 


Requests 
24 ‘a 
. 2013 o 2014 2015 2016* 2017* 


* Due to a change in regulations now the prosecution 
responds directly to requests for intervention and data in 
criminal matters. Telefónica now only receives them in civil 
matters. 


Number of customers affected: 856. Each 
request refers to a line and/or customer. 


Number of requests rejected: O 


ACCESSES 


customers 


42/1 
4,29 / 


Customers at closing 2017 (data in thousands). 
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ACCESS TO METADATA 


Legal framework 
» Integral Organic Criminal Code. Section 499 


Competent authorities 
» Judges of Criminal Guarantees. 


Requests* 
dia 2 oes 
1,086 
a 856 
2013 2014 2015 2016 2017 
*Includin ests for intervention and access to metadata 


record for the informatior 


service ad there is no differentiation according to 


the line of business 


Number of customers affected: 856. Each 
request refers to a line and/or customer. 


Number of requests rejected: O 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
» Integral Organic Criminal Code. Article 583. 


Competent authorities 

> The Prosecutor can, in a well-founded manner, 
request authorisation from the Judge of 
Criminal Guarantees to proceed. 


Requests 


0 0 0 0 0 
2013 2014 2015 2016 2017 


Number of customers affected: O 


Number of requests rejected: 0 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
» Constitution of Ecuador. Articles 164 and 165 


Competent authorities 

P Those that the President of the Republic 
delegates on its behalf, in accordance with the 
circumstances reflected by the Law. 


Requests 
0 0 0 0 
2013 2014 2015 2016 


Number of customers affected: O 


Number of requests rejected: 0 
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Germany_ 


www.telefonica.de/home-corporate-en.html 


Telefónica has a long history in Germany. The 
company, which has been in the country for 
almost 16 years, operates underthe 
commercial brand 02. Telefonica Deutschland, 
resulting from the merger of 02 and the E-Plus 
Group, has more than 43 million mobile 
accesses in the country. 


Telefonica Deutschland offers its German 
private and business customers post-paid and 
prepaid mobile telecom products as well as 
innovative mobile data services based on the 


GPRS, UMTS and LTE technologies. In addition, 


the integrated communications provider also 
offers DSL fixed network telephony and 
high-speed Internet. 


Telefónica's revenue in Germany reached € 
7.296 million and OIBDA, €1,821 million. 


LAWFUL INTERCEPTIONS 


Legal framework 

» Sec. 110 German Telecommunication Act 
(Telekommunikationsgesetz - TKG) 

» Sec. 100a, 100b German Code of Criminal 
Procedure (Strafprozessordnung — StPO) 

» Article 10 Act (Artikel 10 Gesetz - G10) 

> Police Acts of the federal states 
(Landespolizeigesetze) 


Competent Authorities 

Law Enforcement Agencies (LEAs), e.g. Police 

Authorities (national and federal), Intelligence 
Agencies and Customs Investigations Services 
(national and federal). 


Measures corresponding to Sec. 100a German 
Code of Criminal Procedure (StPO) require a prior 
court order. In case of exigent circumstances, the 
public prosecutor's office can issue an order as 
well, which must be confirmed by the court within 
three working days in order not to become 
ineffective. 


Requests* 


19,150 19,119 


2013 “2014 2015 “2016 2017 


* Total volume of interception measures excl. prolongations. 


Number number customers affected: No ACCESSES 
possibility to provide these figures. Interception 
measures are based on MSISDNs (Mobile Station 
Integrated Services Digital Network). The system 
doesn't link requests to accounts or customers so 
itis impossible to know how many accounts or 


customers it's being affected. 


Number of requests rejected: Currently, 
Telefónica Germany does not register rejected 
requests. We're working to make it technically 
possible. 


customers 


43,154, / 


47100339 


Customers at closing 2017 (data in thousands). 
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ACCESS TO METADATA 


Legal Framework 


» Sec. 96, 113b German Telecommunication Act 


(Telekommunikationsgesetz - TKG) 


» Sec. 100g German Code of Criminal Procedure 


(Strafprozessordnung — StPO) 
> Police Acts of the federal states 
(Landespolizeigesetze) 


Competent Authorities 

Law Enforcement Agencies (LEAs), e.g. Police 

Authorities (national and federal), Intelligence 
Agencies and Customs Investigations Services 
(national and federal). 


Measures corresponding to Sec. 100g German 
Code of Criminal Procedure (StPO) require a 
prior court order. In case of exigent 
circumstances, the public prosecutor's office 
can issue an order as well, which must be 
confirmed by the court within three working 
days in order not to become ineffective. 


Requests* 
245,695 333,547 
172,033 
87,818 f f 
2018 “sae . 2015 a 2017 


* Total volume of traffic data and/or radio ce 


records provided 


Number number customers affected: No 
possibility to provide these figures. Interception 
measures are based on MSISDNs (Mobile Station 
Integrated Services Digital Network). The system 
doesn't link requests to accounts or customers 
so it is impossible to know how many accounts or 
customers it's being affected. 


Number of requests rejected: Currently, 
Telefónica Germany does not register rejected 
requests. We are working on it for having this 
register. 


CONTENT BLOCKING AND FILTERING 
Legal Framework 


>N 


a 


Co 
>N 


Re 
DN 


o existing legal basis in German legal/ 


lows conte 


regulatory framework or other sources which 


nt blocking and filtering. 


mpetent Authorities 


ot applicab 


quests 
ot applicab 


e, 


D 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal Framework 

» No existing legal basis in German legal/ 
regulatory framework or other sources which 
allows geographical ortemporary suspension of 
services. 


Competent Authorities 
Not applicable. 


Requests 
» Not applicable. 


Number number of accounts/customers 
affected: 
> Not applicable. 


Number of requests rejected: 
> Not applicable. 
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Mexico _ 


https://www.telefonica.com.mx/ 


Telefónica Mexico has participated and 
competed in the mobile telecommunications 
market since 2001 and promotes the 
development of telecommunications in the 
country. Today it has a national coverage, 
with more than 93.000 locations, 90.000 
kilometers of cables and more than 25 million 
customers. 


The commercial offers are available in 231 
Customer Service Centers (CAC), 36 Movistar 
Stores as well as in nationwide Smart Stores 
and more than 7 thousand indirect points of 
sale throughout the country 


Accesses reach 25.8 million at September of 
2017 


With regard to the financial figures, in 2017 
Telefónica's revenue in Mexico stood at 1,336 
million euros and the OIBDA was 302 million 


euros. 


N 
00 


LAWFUL INTERCEPTIONS 


Legal framework 

» Political Constitution of the United States 
Mexican (article 16, paragraph 12). 

» National Criminal Procedure Code, article 
291. 

» Federal Law Against Organised Crime, 
article 16. 


Competent authorities 

» The federal judicial authority determines 
whether the request of the investigating 
authority concerning the intervention of 
communications is appropriate, ordering 
the concession holder to establish the 
measure for a certain period of time. 


Requests 
= oe 


Number of customers affected: 425. A single 
request may affect multiple customers. 


Number of requests rejected: 1 


ACCESSES 


customers 


25,0/0.9 


25,089.5 


Customers at closing 2017 (data in thousands). 
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ACCESS TO METADATA 


Legal framework 

» Federal Law on Telecommunications and 
Broadcasting (article 190). 

> National Criminal Procedure Code (Article 
303). 

» Law on General Channels of 
Communications (Article 122) 


Competent authorities 

» The heads ofthe security and justice 
procurement authorities shall designate 
the public servants responsible for 
managing the requests which are made to 
the concession holders and receiving the 
corresponding information, by means of 
agreements published in the Officia 
Gazette ofthe Federation. 


Requests 
9,330 
2432 w E 
| il | | 
2013 2014 2015 Soe O7 


Number of customers affected: 8,418. A 
single request may affect multiple customers. 


Number of requests rejected: 719 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 
> There is no specific legal framework for this 


indicator. 


Competent authorities 
» Not applicable. 


Requests 


N/A N/A N/A N/A 


2013 2014 2015 2016 
Number of customers affected: 
Not applicable. 


Number of customers affected: 
Not applicable. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
> There is no specific legal framework for this 


indicator 


Competent authorities 
» Not applicable. 


Requests 


N/A N/A N/A N/A 


2013 2014 2015 2016 
Number of customers affected: 
Not applicable. 


Number of customers affected: 
Not applicable. 
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Peru_ 


http://www.telefonica.com.pe/home/ 


Telefónica began to operate in the Peruvian LAWFUL INTERCEPTIONS Competent authorities ACCESSES 
market in the middle of the 1990s. > Judges (Judicial Authority). 

Legal framework » Public Prosecutor's Office of the Nation, 
The company managed more than 19.3 million » Political Constitution of Peru (article 2, Criminal Prosecutors and Public Prosecutors, 


ac 


cesses at the end of third quarter 2017 


paragra 


ph 10). 


with the authorisation of the Judge. 


» National Police Force of Peru, which must 
require judicial validation within 24 hours. 


> Telecommunications Law (Supreme 
Decree No. 013-93-TCC - article 4) and its 
Regulations (Supreme Decree No. 0202007- 
MTC - article 13). 

> Law No. 27697: Law which grants power to 
the public prosecutor for the intervention 
and control of communications and private 
documents, in exceptional cases. 

> Legislative Decree No. 1182. 


The company managed more than 19.3 million 
accesses at the end of third quarter 2017, 
Telefónica's revenue in Peru stood at 2.318 
million euros and the OIBDA was 588 millon 


2491.2 


customers 


13,/45.1 


1959/5 


Requests* 


euros. 


2,517 


In all the concession contracts there is a clause 850 

related to the secrecy of telecommunications gg 2 E E ELU 
and the protection ofpersonal data which i g f : 
establishes that the company will safeguard i A A AA AA 
them and maintain the confidentiality of 2013 2014 2015 2016 2017 
the personal information related to their 
customers, unless there is a specific court 
order 


* A request may involve more than one line of consultation 


Number of customers affected: The details 
of the number of requests, not customers or lines 
affected by the requests, given that customers 
could be in possession of more than one line 
assigned and each request of the entity State 
may involve multiple lines. However, work is being 
doneto register the number of customers 
affected by the measures required. 


Number of requests rejected: 29 


Customers at closing 2017 (data in thousands). 
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ACCESS TO METADATA 


Legal framework 

» Political Constitution of Peru (article 2, 
paragraph 10). 

» Telecommunications Law (Supreme Decree 
No. 013-93-TCC - article 4) and its 
Regulations (Supreme Decree No. 020- 
2007MTC - article 13). 

> Law No. 27697: Law which grants power to 
the public prosecutor for the intervention 
and control of communications and private 
documents, in exceptional cases. 

> Legislative Decree No. 1182, which regulates 
the use of telecommunications for the 
identification, location and geolocation of 
communication equipment, in the fight 
against crime and organized crime. 


In allthe concession contracts there is a 
clause related to the secrecy of 
telecommunications and the protection of 
personal data which establishes that the 
company will safeguard them and maintain 
the confidentiality of the personal 
information related to their customers, unless 
there is a specific court order. 


Competent authorities 

> Judges (Judicial Authority). 

> Public Prosecutor's Office of the Nation, 
Criminal Prosecutors and Public Prosecutors, 
with the authorisation of the Judge. 

» National Police Force of Peru, which must 
require judicial validation within 24 hours. 


Requests* 
44,359 
33,115 
8,958 10,006 9,595 
2013 2014 2015 2016** 2017 


*A request may involve more than one line of consultation. 


fact that from the end 


he inc e in requests was due 


of 2015 the Legislative De 


to implemented 


Number of customers affected: The details of 
the number of requests is registered, not 
customers or lines affected by the requests, 
given that customers could be in possession of 
more than one assigned one and each request of 
the State entity may involve multiple lines. 
However, work is being done to obtain the 
number of customers affected by the requests 
required. 


Number of requests rejected: 1,059 


CONTENT BLOCKING AND FILTERING 


Legal framework 
> There is no specific legal framework for this 
indicator 


Competent authorities 

PN/A 

Requests 
N/A N/A N/A N/A N/A 
203 204 2015 2016 2017 


Number of customers affected: 
Not applicable. 


Peticiones rechazadas: 
Not applicable. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 

> Regulation of the Telecommunications Law 
(S.D. No. 020-2007-MTC - articles 18 and 19) 

> The concession contracts establish that, in 
the event of an emergency, crisis or a threat 
to national security, the concession holder 
will provide the telecommunication services 
prioritising actions to support the State and 
following the instructions of the MTC. 


Competent authorities 

> Ministry of Transport and Communications 
(MTC). 

» National and Civil Defence System 


Requests 
0 0 0 0 0 
2013 2014 2015 2016 2017 


Number of customers affected: O 


Number of requests rejected: 0 
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Spain_ 


https://www.telefonica.es/es/ 


Telefónica operates in Spain, mainly in the 
fixed and mobile telephone sector, using 
broadband as the key tool for developing 
both businesses, along with IT and services. 
Telefónica España is the biggest provider of 
telecommunication services in Spain for 
access, taking in voice, data, television and 
internet access. Additionally it is offering its 
clients the most innovative services and 
cutting edge technology to achieve its aim of 
becoming the first digital telco. 


Telefónica España handled more than 40.9 
million connections at December of 2017 


Revenue from operations amounts to 12.653 
millones de euros euros and its OIBDA 
reached 4.952 million euros in 2017. 


LAWFUL INTERCEPTIONS 


Legal framework 

> Spanish Constitution (art. 18). 

> Law of criminal prosecution (Art. 588) 

> General Law 9/2014 on Telecommunications 
(articles 39-42). 


Competent authorities 
> Judges of the Magistrates Courts. 


> Exceptional cases (emergencies, armed 
groups): the Minister of the Interior or the 
Secretary of State for Security. In 24 hours 
the judge shall ratify or revoke the reques 


Requests 


45,137 
41711 44,375 m 
34,595 


2013 2014 2015 2016 2017 


Number of customers affected: 11.306 


Number of requests rejected: 5.598 


ACCESS TO METADATA 


Legal framework 

> Law 25/2007 on Data Conservation (Articles 
1-10). 

> General Law 9/14 on Telecommunications 
(articles 39-42) 


Competent authorities 

> Courts 

> Judicial Police and Public Prosecutor's Office 
(Organic Law 13/2015 amending the Criminal 
Procedure Code) 


Requests 


59,324* 


48,218. .6.984 


44,599 
ii li 40,795 ïl 


2013 2014 2015 2016 2017 


* In 2017, a new system of sending judicial orders by the 
State Security Forces and Corps was implemented, in which 
each request for data gives rise to an individual request. With 
the previous system, which is still in place for most of these 
agents, a single warrant could result in multiple data requests, 
even if it was counted as one. 


ACCESSES 


customers 


17,5/6.5 


40,989.6 


Customers at closing 2017 (data in thousands). 
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Number of customers affected: Not 
available The nature of certain requests and 
the current configuration of our registration 


tools do not allow provision of this information. 


Number of requests rejected: Not available 
The nature of certain requests and the current 
configuration of our registration tools do not 
allow provision of this information. 


BLOCKING AND FILTERING 
OF CERTAIN CONTENTS 


Legal framework 

» Royal Decree 1889/2011 of 30 December, 
regulating the functioning of the Intellectual 
Property Commission (articles 22 and 23). 

» Revised Text of the Intellectual Property Law, 
approved by Royal Legislative Decree Law 
1/1996 of 12 April (Article 138). 

> Law 34/2002 of 11 July on services of the 
information society and electronic commerce 
(article 8). 


Competent authorities 

> National Markets and Competition 
Commission. 

> Mercantile/Civil/AccountingAdministrative/ 
Criminal Courts. 

» National Intellectual Property Commission 

> General Gambling Directorate. 

» Agency for Medicine/Doping/Health/Sport 


Requests* 
8l 
35 
17 18 
wo Y 
2013** 2014 2015 2016 2017*** 


2fonica Españ 
cn are ina 


regulations, to block 


** The number of blocked web pages was 1.861 


Number of customers affected: The 
blocking of a URL affects all customers who 
want to access its content, so it is difficult to 
assess the scope. 


Number of requests rejected: 0 


ders and/or administrative 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal framework 
P There is no specific legal framework for this 


indicator. 


Competent authorities 
» Not applicable. 


Requests* 


N/A N/A N/A N/A 


2013 2014 2015 2016 


Número de clientes afectados: No aplica. 


Peticiones rechazadas: No aplica. 
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United Kingdom_ 


https: //www.02.co.uk/ 


Telefónica starts operating in the United 
Kingdom in 2006, after acquiring 02, which 
becomes the commercial brand of Telefónica 
UK Limited. 


02 runs 2G, 3G and 4G networks across the 
UK, as well as operating 02 Wifi, with over 6 
million clients, and owning half of Tesco 
Mobile. 02 has over 450 retail stores. 


The company managed more than 25,000 
accesses in the UK. 


With regard to the financial figures, in 2017 
Telefónica's reveneu in UK stood at €6,540 
million and OIBDA amounts up to €1,639 
million 


LAWFUL INTERCEPTIONS 


Legal Framework 

The provisions for lawful intercept under the 
Regulation of Investigatory Powers Act 2000 
(RIPA) and the Intelligence Services Act 1994 
(ISA) are due to be replaced by the 
Investigatory Powers Act 2016 (IPA). This will 
happen once the Investigatory Powers 
Commission (IPC) is fully established. The 
Investigatory Powers Commission's Office 
(IPCO) replaced the Interception of 
Communications Commissioner's Office 
(IOCCO) on lst September 2017 but no new 
processes have yet been introduced. There will 
be a transitional period before the IPA fully 
replaces RIPA and the ISA and the IPCO 
replaces the lOCCO. 


Competent Authorities 

The principles of RIPA have been continued 
under the IPA but with additional oversight by 
the judiciary. Under the IPA, the Secretary of 
State for a relevant Government department 
can issue an intercept warrant where he/she 
believes it is necessary in the interests of 
national security, for the purpose of preventing 
or detecting serious crime or for the purpose of 
safeguarding the economic well-being of the 
United Kingdom. 


There are eight authorized agencies in the 

United Kingdom who may request a warrant to 

be issued by the Secretary of State. They are: 

» a person who is the head of an intelligence 
service; 

> the Director General of the National Crime 
Agency; 

>the Commissioner of Police of the Metropolis; 

>the Chief Constable of the Police Service of 
Northern Ireland; 

>the chief constable of the Police Service of 
Scotland; 

>the Commissioners for Her Majesty's Revenue 
and Customs; 

>the Chief of Defense Intelligence; and 

>a person who is the competent authority of a 
country or territory outside the United 
Kingdom for the purposes of an EU mutual 
assistance instrument or an international 
mutual assistance agreement. 


In order to get a warrant for lawful 
interception, the requesting authority must 
make an application to the relevant Secretary 
of State. The Secretary of State must consider, 
in deciding whether to issue the warrant, 
whether (amongst other things), there are 
established grounds to justify the issue ofthe 
warrant (see above) and whether the 
interception authorized by the warrant is 
proportionate to what is sought to be achieved 
by that interception. 


ACCESSES 


283.9 


customers 


25, 003.9 


Za e IEA 


Customers at closing 2017 (data in thousands). 
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Under the IPA, and in addition to authorization 
by the Secretary of State (or their deputy) that 
was required by RIPA, there must also be 
approval of the warrant by ajudge. The judge 
will consider the same factors as the Secretary 
of State (i.e. whether there are grounds for the 
issuing of the warrant and whether the 
conduct is proportionate to the objective). 


Requests* 


N/D N/D N/D N/D N/D 


2013 2014 2015 2016 2017 


Number number of customers affected: 
N/D 


Number of requests rejected: 
N/D 


ACCESS TO METADATA 


Legal Framework 

The provisions for disclosure of 
communications data under RIPA and the ISA, 
and the Counter Terrorism and Security Act 
2015 (CTSA) are due to be superseded by the 
IPA as soon as the IPCO has been established 
and is fully functional. Until that time the 
current provisions remain in effect. 
The provision for data retention, previously 
retained under Data Retention Investigatory 
Powers Act 2014 (DRIPA 2014), is now made 
under a retention notice issued under the IPA. 


Competent Authorities 

> RIPA regime 

> Under s.22 (4) of RIPA a notice may be issued 
by a person holding a prescribed office, rank or 
position within a relevant public authority 
designated with the power to acquire 
communications data by order under s.25 (2) 
and under the Regulation of Investigatory 
Powers (Communications Data) Order 2010 (SI 
2010/480). The persons that can issue a 
notice are typically senior police offices or 
other senior officials in relevant security 
services. 


> Under s.22 (3) of RIPA persons within a public 
authority may be given an authorisation to 
directly obtain the communications data in 
question in certain circumstances. 


> Future 

> Under s 61 of the IPA an authorisation to 
release data may be made by a designated 
senior officer in a relevant public authority. 
Similarly to RIPA, under the IPA the persons 
that may authorise release of data are 
typically senior police officers or other senior 
officials in relevant security services. 


Requests* 


N/D N/D N/D N/D N/D 


2013 2014 2015 2016 2017 


Number number of customers affected: 
N/D 


Number of requests rejected: 
N/D 


CONTENT BLOCKING AND FILTERING 


Legal Framework 

» Section 97A of the Copyright Designs and 
Patents Act (1988) 

» s37(1) Supreme Courts Act 1981 

» Article 11 ofthe IP Enforcement Directive. 


The only content filtering the UK government 
equire from UK broadband and mobile operators 
is use ofthe Internet Watch Foundation (IWF) 
blocking list for illegal child abuse sites. This is 
part of an agreement between the CSPs and the 
aw enforcement community to prevent child 
exploitation. This is a voluntary code of practice 
and not a legal requirement. In 2004, Telefónica 
UK was a founder signatory to the UK mobile 
operators’ child protection code of practice for the 
self-regulation of new forms of content on 
mobiles. This Code also explains that we wil 
voluntarily block access to 18-rated content 
unless a customer has confirmed they are over 
18. This is legal content. e.g. legal adult sites 
(unlike IWF sites which are child abuse sites). 


The existence of this code of practice and 
compliance with it by UK mobile operators is 
unusual. It is unusual in that it is not something 
to our knowledge) that is replicated in other 
countries and also it is unusual in that itis not 
inding but yet still complied with by the mobile 
operators. 


= 


EN 
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The code of practice can be viewed here: http:// 
www.mobilebroadbandgroup.com/documents/ 
mbg_content_code_v2_100609.pdf 


Competent Authorities 
> Internet Watch Foundation 


» Courts. 


Requests* 


N/D N/D N/D N/D N/D 


2013 2014 2015 2016 2017 


Number number of customers affected: N/D 


Number of requests rejected: N/D 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal Framework 

> Telefónica UK has obligations to be able to 
provide service limitations in network overload 
situations —e.g. major disaster, etc. to provide 
priority service to emergency responders. The 
obile Telecommunications Privileged Access 
Scheme (MTPAS) was created underthe Civil 
Contingencies Act 2004 (CCA). Eligibility is 
restricted to organisations that have a part to 
play in responding to, or recovering from, an 
emergency as defined inthe CCA. At the onset 
of an emergency response, the relevant Police 


commander will use an agreed protocol to notify 


all mobile network operators that a major 
incident has been declared and request that call 
traffic levels are monitored. If networks become 
congested, the network operators are asked to 
consider invoking MTPAS to give emergency 
responders a much higher likelihood of being 
able to make a call than other customers. 


Competent Authorities 

> The relevant Police commander will use an 
agreed protocol. 

» Suspension of services are negotiated between 
the emergency authorities and the CSP and 
Telefónica UK can resist if we feel the action 
would not impact network loading. 


Requests 
0 0 0 0 0 
2013 2014 2015 2016 2017 


Number number of customers affected: 0 


Number of requests rejected: 0 
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Uruguay_ 


http://www.movistar.com.uy/ 


Telefónica has been present in Uruguay since 
2005. Besides digital solutions it mainly offers 
mobile telephony to its customers. 


At 2017, Telefónica's revenue in Uruguay 
reached 235 million euros and the OIBDA was 
85 million euros. 


LAWFUL INTERCEPTIONS 


Legal Framework 

» Constitution of the Republic (article 28) 
> Law 18,494 (article 5) 

» Reserved decree of 13 March 2014. 


Competent Authorities 

> Criminal judges in charge of an investigation, at 
the request of the Public Prosecutor's Office and 
through the UNATEC (body of the Ministry of 
the Interior responsible for centralizing such 
requests). 


Requests 
2,311 2,325 
2,016 
Se 
—— io | |... 
2013 w "618 . $616 . 2017 


Number of customers affected: 1.244 


Number of requests rejected: 46 


ACCESS TO METADATA 


Legal Framework 

» Constitution ofthe Republic (article 28). 
> Law 18,494 (article 5). 

» Reserved decree of 13 March 2014 


Competent Authorities 
> Judges, by means of a written and wellfounded 
request.. 


Requests 


2013 2014 2015 2016 2017* 


* The increase with respect to 2016 is due to the fact 

that from 2017 onwards there is a tool that allows the 
requirements for each affected customer to be accounted 

for. Until then, the same injunction contained more than one 
affected customer. As of 2017, each requirement corresponds 
to one affected customer. Therefore, it is due to the change in 
the accounting criteria. 


Number of customers affected: 3.612 


Number of customers affected: 0 


ACCESSES 


customers 


1,581 


1,581 


Customers at closing 2017 (data in thousands). 
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CONTENT BLOCKING AND FILTERING 


Legal Framework 

» Law 19.535 of 25 September 2017 (articles 
244 y 245) 

> Decree 366/2017 of 21 December 2017 
developed according on art.244 and 245 of 
law 19.535 


Competent Authorities 

» The Executive is empowered to take the 
necessary preventive and punitive measures 
to prevent the proliferation of Internet 
gaming marketing activities, in particularthe 
blocking of access to websites. 


Requests 


N/A N/A N/A N/A 0 


2013 2014 2015 2016 2017 


Number of customers affected: O 


Number of requests rejected: O 


Ww 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal Framework 

> Law 19,355 (article 166): enables the Ministry 
of the Interior to block the entry of calls from 
telephone services to the 911 Emergency 
Service when there are duly documented 
records accrediting the irregular use of such 
communications on a repeated basis (more 
than 3 communications in the month or 6 in 
the year). 


Competent Authorities 
> Ministry of the Interior (Executive Power) 


Requests* 
3,235 
2,766 
A IA 
0 21 a 
2013 Du 2015 2016 2017 
* Temporary and individual suspension of 911 emergency 


services for periods of between 3 and 6 months 


Number of customers affected: 3.235 


Number of requests rejected: O 
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Venezuela 


https://www.telefonica.com.ve/es/ 


The Telefónica Group has operated mobile 
telephony services in Venezuela since 2005 


The company has a comprehensive range of 
services in Venezuela, with leading products in 
mobile internet, digital television and mobile 
and landline telephony. 


In 2017, Telefónica's income in Venezuela was 
106 million euros and the OIBDA stood at 34 
million euros. 


LAWFUL INTERCEPTIONS 


Legal Framework 
> Organic Criminal Procedure Code (Art. 205 
and 206). 


> Decree with Rank, Value and Force of the 
Organic Law of the Police Investigation 
Service, the Scientific, Penal and Criminal 
Investigations Corps and the National Service 
of Medicine and Forensic Science (article 42). 


Competent Authorities 

> The Public Prosecutor's Office, through its 
prosecutors. 

>The Scientific Research Agency Criminal and 

investigations (CICPC). 

» The Bolivarian National Intelligence Service 
(upon the request of the Public Prosecutor and 
the authorisation of the corresponding judge). 

>The police corps duly empowered to exercise 
powers in criminal investigations. 

» National Experimental University of Security; 
other special criminal investigation organs and 
bodies. 


Requests 


380,250 


339,646 
235, 201. 234,932 
1, il iW 


2013 2014 2015 2016 2017 


Number of customers affected: A request 


may require the intervention of up to 10 clients. 


Peticiones rechazadas: 0 
ACCESS TO METADATA 


Legal Framework 

> Ordinance No. 572 Regulations related to 
Request of information in the Mobile 
Telephone Service of the National 
Telecommunications Commission (article 7). 

> Law against Kidnapping and Extortion (article 
29) 


Competent Authorities 

> The Public Prosecutor's Office. 

>The Scientific Research Agency Criminal and 
investigations (CICPC). 

> The components of the Bolivarian National 
Armed Forces, within the limits of their 
competence. 

» The police intelligence authorities. 

> The National Police Corps, within the limits of 
its auxiliary criminal investigation duties. 

> Any other auxiliary criminal investigation 
body whose intervention is required by the 
Public Prosecutor's Office.Autoridades de 
inteligencia policial. 


ACCESSES 


4 


customers 


9,398 


accesses 


10,386 


Customers at closing 2017 (data in thousands). 
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EC? ABEL 
Requests 
121.670 
46:672 
32.646 
= 24,520 l 
15.847 : 
2013 2014 . 2015 She suit 


*The increase with respect to 2016 is due to the change in 
the accounting criteria. In 2017 a tool was used to account 
for the requirements for each affected customer. Until then, 
the same injunction (oficio judicial) contained more than one 
affected customer. As of 2017, each requirement corresponds 
to one affected customer 


Number of customers affected: 121.610 


Number of requests rejected: 0 


40 


BLOCKING AND FILTERING OF CERTAIN 
CONTENTS 


Legal Framework 

> Organic Law on Telecommunications (Article 5). 

» Law on Social Responsibility in Radio, Television 
and Electronic Media (article 27) 

> Decree 366/2017 of 21 December 2017 which 
developed regarding art 244 and 245 244 y 245 
of Law 19.535 

> Law 19.535 of 25 September2017 (art. 244 y 
245). 

> Decree 366/2017 of 21 December 2017 


Competent Authorities 

» National Telecommunications Commission 
(CONATEL). 

> Law 19.535 del 25 de setiembre de 2017 
(artículos 244 y 245) empowers the Executive 
Branch to takethe necessary preventive and 
punitive measures to prevent the proliferation of 
Internet gaming marketing activities, in 
particular the blocking of access to websites. 


Requests 
see 1.050 
ERAN 


Number of customers affected: The blocking 
of a URL affects all customers who want to access 
its content, so it is difficult to assess the scope. 


Number of requests rejected: 3. 


GEOGRAPHICAL OR TEMPORARY 
SUSPENSION OF SERVICES 


Legal Framework 
> The Organic Law on Telecommunications 
(Article 5). 


Competent Authorities 

> Ministry of Transport and Communications 
(MTC). 

» National and Civil Defence System. 


Requests 
1 
O 0 0 0 0 
2013 2014 2015 2016 2017 


Number of customers affected: O 


Number of requests rejected: 0 
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ECƏ? REPA 


Glossary_ 


CONCEPT 


Competent authority 


EXPLANATION 


Authority, such as governments, non-judicial 
government authorities and courts, empowered by 


the law to approve or authorize the adopti 


on and 


order the technical execution ofa measure for legal 
interception, a request for 


contents or 


metadata, the 


the suspension ofthe service. 


blocking of 


Personal data 


Personal data means any information whi 


to an identi 


fied or identifia 


or her name and address, t 


her commu 
the commu 


nications, the t 


ble person, suc 


raffic data (day 


recipients of the communications, etc.). 


ch refers 
h as his 


he recipients of his or 
nications, the location, the content of 


s, time, 


Location data 


The location data may refer to the latitude, longitude 


and altitude ofthe user's termi 


direction of travel, the level of accuracy of the location 


information 
which the terminal equipment i 


nal equipment, the 


, the identification of the network cell in 
s located at a certain 


moment or the time at which the location information 
has been recorded. 


Traffic data 


Any data processed forthe purposes of 
conducting communication through an electronic 
communications network or for invoicing purposes. 


CONCEPT 


DPI 


EXPLANATION 


These are the initials which stand for Deep Packet 
Inspection. DPI identifies situations involving non- 
compliance with technical protocols, viruses, spam 
or invasions, but it can also use pre-defined criteria 
different from those annotated to decide whether 


a packet can pass throu 
routed to a different de 
priority or bandwidth a 
for statistical purposes 


gh or whether 


location, to co 
or simply to eli 


it needs to be 


stination or given another 


ect information 
minate it. 


IMEI 


These are the initials which stand for | 
Mobile Station Equipment Identity. It 


number which physical 


nternational 
has a serial 


y identifies the terminal. The 


IMEI enables the operator to identify valid terminals 


which, therefore, can co 


nnect to the Network. 


IMSI 


These are the initials which stand for | 


Mobile Subscriber Identi 


line or service. This number is used to 


to obtain the country o 


rnetwork to w 


nternational 


ty. It is the identifier of the 


route calls and 
hich it belongs. 


002.0. 
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CONCEPT EXPLANATION CONCEPT EXPLANATION 

IOCCO These are the initials which stand for Interception of MAJOR EVENTS (cont.) * Specific shutdown of any kind of telecommunications 
Communications Commissioner's Office in the UK. Itis services, resulting from political causes. (e.g. 
responsible for keeping under review the interception concerning a small number of cells). 


f communications and the acquisition and circulation 
communications data by intelligence agencies, 


0 
o * Denying certain clients access to specific services or 
police forces and other public authorities. It submits 

b 

e 


networks in order to limit said individuals’ legitimate 
freedom of expression. 


¡annual reports to the Prime Minister regarding the 
xecution of the functions of the Communications 
Interception Commissioner. 


» Network shutdown / access control 


Examples: 
MAJOR EVENTS ajor Events In addition, in this Transparency Report 
our objective is to explain, in a comprehensive manner, e Total shutdown of a national network. 
our efforts with regard to requests and demands with eer f ; 
a potentially relevant impact on the right to freedom “Access contro te iS on 
of expression in telecommunications. We classify such motivated by political reasons. 
requests and demands as “major events’. > Legally unfounded interceptions 
We conside major events’ to be certain situations of + Situations in which the authorities intercept 


force majeure which may lead to the following actions: communications without any legal grounds for 


reasons of force majeure. 


= 


» Service restriction or denial (including SMS, voice, 
email, voicemail, internet and other services) entailing 
limitation of freedom of expression. 


» Communications imposed by the authorities 


Examples: 
Examples: j 


* Sending politically motivated messages/ 
communications to our customers on behalf of 
governments or government agencies. 


e Restricting or denying services on a national scale. 


e Restriction or denial of access to a website/ websites 
for political reasons (such as Facebook pages, news 
websites (e.g. bbc. co.uk), the opposition party's 


» Substantial operational changes 


websites prior to elections, human rights groups 
websites, etc.). 
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E CREA 


CONCEPT 


EXPLANATION 


MAJOR EVENTS (cont.) 


Examples: 


* Substantial operational 


or technical changes or 


change proposals concerning surveillance services 
(such as data access, retention or interception) 
aimed at reducing the operator's control in terms of 


supervising such activit 
allowing direct access o 
agency/ government). 


* A procedural change to 
surveillance. 


les. (e.g. procedural changes 
n the part of a governmental 


establish widespread 


» Substantial legal changes Substantial changes 


equests on operators. 


Example: 


n this regard we have ide 


or change proposals) involving laws providing 
governmental authorities with more power to impose 


* Changes in the communication interception laws. 


ntified a case of major 


event in Venezuela within the situation “Substantial 


operational changes’ 


In October 2017, Adminis 


mainly, the data to be co 


must keep stored andin 
S 


investigative or investiga 
a criminal investigat ion. 


on the Collection or Capture of Personal Data from 
Applicants for Mobile and 


trative Ruling No. 171 "Rules 


Fixed Telephony Services via 


Wireless Networks or Non-Geographic Number with 
omadic Voice Service" c 


and expanding the information that the operator 


ame into force, modifying, 
lected from new customers 


ecords with respect to: their 


ubscribers, data services, call details, text messages, 
top-ups, to be provided to State security bodies with 
tive powers on the occasion of 


CONCEPT 


EXPLANATION 


PSI 


Portal) is an inquiry appl 


o 
of the organizati 
internal procedures ona 
security. 


The PSI or Portal de Servicio Interno (Internal Service 


ication, allowing members 


the Colombian National Police, as internal clients 
on, to find all the information on 


website with high levels of 


SUTEL 


C 
Regulatory Authority, € 
p 
fi 


S 
quality, greater and bet 
as well as better altern 
telecommunications se 


o 


ublished on 13 August 2008. SUT 
or applying the regulation to the telecommunications 
ector and ensuring efficiency, equality, continuity, 
ter coverage and information, 
tives for the provision of 


he SUTEL is a maximum deconcentration body in 
osta Rica, attached to Aresep, the Public Services 


eated by virtue of Law 8,660, 
EL is responsible 


vices. 


TELCOR 


TELCOR, the Nicaraguan 
elecommunications an 


Institute for 
d Postal Services, isthe 


Regulatory Body of Telecommunications and Postal 


Services, a state institution whose functions include 


the regulation, standardi 


zing, technical planning, 


supervision, application and control of the fulfilment 


installation, interconnec 


of the Laws and Regulati 


of Telecommunications and Postal Services. 


ons which govern the 
tion, operation and provision 


URL 


These are the initials wh 
Resource Locator, which 
resources. This denomin 


ich stand for a Uniform 
is used to name internet 
ation has a standard format 


and its purpose is to assign single address to each of 


the resources available on the Internet, such as pages, 


images, videos, etc. 


Jelefonica 


